EUVD-2026-29404

webpack-dev-server vulnerable to cross-origin source code exposure on non-HTTPS origins...

EUVD-2018-18030

Malware in sbrugna...

EUVD-2023-33543

Malicious code in bioql PyPI...

CVE-2024-3958

An issue has been discovered in GitLab CE/EE affecting all versions before 17.0.6, 17.1 prior to 17.1.4, and 17.2 prior to 17.2.2. An issue was found that allows someone to abuse a discrepancy between the Web application display and the git command line interface to social engineer victims into...

The vulnerability of Intel graphics processor microprogramming software, related to the swapping of a non-trusted pointer, allows attackers to increase their privileges.

The vulnerability of Intel graphics processor microprogramming software is related to the use of a non-trusted pointer. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of Windows operating systems, related to the swapping of a non-trusted pointer, allows attackers to escalate their privileges.

The vulnerability of Windows operating systems is related to the use of a non-trusted pointer. Exploiting this vulnerability can allow an attacker to gain increased privileges...

The vulnerability of the input/output subsystem of the Intel QuickAssist Technology (QAT) driver package allows a hacker to gain unauthorized access to protected information.

The vulnerability of the input/output subsystem of the Intel QuickAssist Technology QAT driver package is related to the use of a non-trusted pointer. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

The vulnerability of the Secure Kernel Mode mode in Windows operating systems allows attackers to enhance their privileges.

The vulnerability of the Secure Kernel Mode feature in Windows operating systems is related to the swapping of a non-trusted pointer. Exploiting this vulnerability can allow an attacker to gain increased privileges...

The vulnerability of the Windows Secure Kernel Mode mechanism in the Microsoft Windows operating system, which allows a hacker to increase their privileges

The vulnerability of the Windows Secure Kernel Mode mechanism in the Microsoft Windows operating system is related to the swapping of a non-trusted pointer. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the Windows DWM library in Windows operating systems, related to the swapping of a non-trusted pointer, allows attackers to escalate their privileges.

The vulnerability of the Windows DWM library in Windows operating systems is related to the swapping of a non-trusted pointer. Exploiting this vulnerability can allow an attacker to gain increased privileges...

The vulnerability of Windows operating system kernels, related to the swapping of a non-trusted pointer, allows attackers to escalate their privileges.

The vulnerability of the Windows operating system’s kernel is related to the swapping of an unreliable pointer. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the secure kernel mode of Windows operating systems allows attackers to enhance their privileges.

The vulnerability of the Windows operating system’s safe mode relates to the swapping of a non-trusted pointer. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the kernel driver of Windows operating systems allows attackers to gain increased privileges.

The vulnerability of the kernel driver in Windows operating systems is related to the swapping of a non-trusted pointer. Exploiting this vulnerability can allow an attacker to increase their privileges...

BIT-GITLAB-2024-3958 Improper Control of Generation of Code ('Code Injection') in GitLab

An issue has been discovered in GitLab CE/EE affecting all versions before 17.0.6, 17.1 prior to 17.1.4, and 17.2 prior to 17.2.2. An issue was found that allows someone to abuse a discrepancy between the Web application display and the git command line interface to social engineer victims into...

CVE-2024-3958 Improper Control of Generation of Code ('Code Injection') in GitLab

An issue has been discovered in GitLab CE/EE affecting all versions before 17.0.6, 17.1 prior to 17.1.4, and 17.2 prior to 17.2.2. An issue was found that allows someone to abuse a discrepancy between the Web application display and the git command line interface to social engineer victims into...

CVE-2024-3958 Improper Control of Generation of Code ('Code Injection') in GitLab

An issue has been discovered in GitLab CE/EE affecting all versions before 17.0.6, 17.1 prior to 17.1.4, and 17.2 prior to 17.2.2. An issue was found that allows someone to abuse a discrepancy between the Web application display and the git command line interface to social engineer victims into...

The vulnerability of the Windows operating system’s streaming data transmission service allows attackers to enhance their privileges.

The vulnerability of the Windows operating system’s streaming data transmission service is related to the use of a non-trusted pointer. Exploiting this vulnerability can allow attackers to increase their privileges...

GHSA-7CVR-XHM5-X998 Twig Path Traversal vulnerability in the filesystem loader

Twig is affected by path traversal vulnerability when used with TwigLoaderFilesystem for loading Twig templates but only if the application is using non-trusted template names names provided by a end-user for instance. When affected, it is possible to go up one directory for the paths configured ...

PT-2024-40156 · Twig · Twig

Name of the Vulnerable Software and Affected Versions: Twig affected versions not specified Description: The issue allows for path traversal when Twig is used with Twig Loader Filesystem for loading templates and the application uses non-trusted template names. This enables an attacker to access...

The vulnerability of the microprogramming software of AMI MegaRAC SP-X controllers allows a perpetrator to compromise the confidentiality, integrity, and accessibility of data.

The vulnerability of the microprogramming software of AMI MegaRAC SP-X remote control servers is related to the use of a non-trusted pointer. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of data...